$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa File: 8f4c8042-28a7-306f-bc00-576bc266f8e8.roa (raw, json) Hash identifier: SMxWLpDI8MKu9Dr/hNPEU8JP7tr6+fuuTd2fy9uPqtI= Subject key identifier: DC:A7:08:34:72:1F:6A:2A:60:91:26:7D:1D:43:3F:63:4F:DD:5A:A5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E03613962A27C1F9BBE1B9 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 172.253.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:36:13:96:2a:27:c1:f9:bb:e1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=83528116-5fc3-4476-8689-437d21de2e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4d:2b:1d:7b:9c:e4:f4:b8:e1:3a:a7:68:43: 84:97:27:9e:2d:bf:10:47:d1:56:7f:e6:d7:25:30: 64:1d:80:bc:b4:87:ee:4f:a3:c9:99:3c:4f:f5:fc: 8a:34:c7:f7:2c:1c:88:97:34:21:df:a7:67:89:6c: e4:5a:dd:12:fe:85:a2:3c:49:d5:34:4a:4d:17:97: 0a:cf:11:79:d9:ec:53:da:0d:cf:d1:b5:7c:27:5b: be:16:6f:b2:76:c2:4d:64:a3:3e:8e:8d:ad:49:46: 97:57:6f:84:aa:fa:d9:27:ef:a6:ca:5e:e5:96:69: b9:23:28:69:e7:41:90:42:13:37:7f:26:cb:de:73: e9:e6:f3:a7:9c:a0:42:7d:6f:8d:c1:35:fa:8c:59: dc:0f:56:5f:24:c7:79:6e:41:9c:fa:e1:b4:c6:18: 68:c3:c7:2b:24:53:3c:19:27:34:54:52:35:a9:25: 62:cc:ad:b2:da:cd:4c:36:59:08:12:0d:3f:7b:43: 7a:7d:37:ad:41:64:04:6b:e5:f1:1c:5b:b1:1c:a0: c0:9d:e2:5b:42:d5:09:62:5a:fa:36:ed:c0:0e:69: f8:d8:af:d9:f5:6d:95:0e:70:b9:b4:38:d8:ad:11: 33:ea:d1:82:5e:e9:76:1d:34:0a:b8:f5:2f:19:1d: 03:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A7:08:34:72:1F:6A:2A:60:91:26:7D:1D:43:3F:63:4F:DD:5A:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:3a:d9:7c:97:a2:d7:39:36:bf:28:ee:4d:ee:7b:dc:cd:29: aa:31:d1:93:b1:6f:3c:16:e0:e0:a0:0a:ed:22:91:5e:a1:2b: a5:33:6d:9b:92:40:6c:b3:23:4b:c5:fc:10:3b:f6:46:2b:99: fc:ae:ff:31:e4:27:32:65:4a:a6:b1:7d:65:3a:3e:05:0a:58: 2a:ab:4d:9d:dc:74:f6:fe:37:64:4e:dd:b3:08:f8:89:51:10: 3a:57:bb:48:67:c4:cb:7a:ce:eb:e6:86:b5:5b:ac:4c:b3:f2: 77:6a:09:8a:95:fb:d0:80:2f:0c:f4:9d:7d:f4:5b:5e:4b:75: 44:06:29:d9:c1:10:59:30:e7:52:11:81:c4:75:07:60:91:ab: f1:48:bf:e4:a8:45:ad:4a:16:7b:f8:77:98:16:b1:8a:2f:dd: f1:b6:3d:cb:2f:51:b1:e2:5f:e6:c4:2f:ec:f3:61:d4:3d:c0: 98:9d:01:c3:da:5f:34:6b:1a:dd:44:70:4b:8e:88:8a:34:8a: b4:1d:15:76:d7:77:da:43:eb:d3:0e:e7:2f:3e:23:55:a3:b8: 39:6a:59:df:cc:0c:61:2d:30:d2:db:eb:ad:b0:ea:25:97:fe: 6f:9f:f9:49:d1:83:a2:cf:6d:85:9a:58:c4:a6:76:cc:2a:d8: b1:fa:26:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4DYTlionwfm74bkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ODM1MjgxMTYtNWZjMy00NDc2LTg2ODktNDM3ZDIxZGUyZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv00rHXuc5PS44TqnaEOElyeeLb8QR9FWf+bX JTBkHYC8tIfuT6PJmTxP9fyKNMf3LByIlzQh36dniWzkWt0S/oWiPEnVNEpNF5cK zxF52exT2g3P0bV8J1u+Fm+ydsJNZKM+jo2tSUaXV2+EqvrZJ++myl7llmm5Iyhp 50GQQhM3fybL3nPp5vOnnKBCfW+NwTX6jFncD1ZfJMd5bkGc+uG0xhhow8crJFM8 GSc0VFI1qSVizK2y2s1MNlkIEg0/e0N6fTetQWQEa+XxHFuxHKDAneJbQtUJYlr6 Nu3ADmn42K/Z9W2VDnC5tDjYrREz6tGCXul2HTQKuPUvGR0DWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNynCDRyH2oqYJEmfR1DP2NP3VqlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGY0YzgwNDItMjhhNy0z MDZmLWJjMDAtNTc2YmMyNjZmOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErP0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAII62XyXotc5Nr8o7k3ue9zNKaox0ZOxbzwW4OCgCu0ikV6hK6UzbZuS QGyzI0vF/BA79kYrmfyu/zHkJzJlSqaxfWU6PgUKWCqrTZ3cdPb+N2RO3bMI+IlR EDpXu0hnxMt6zuvmhrVbrEyz8ndqCYqV+9CALwz0nX30W15LdUQGKdnBEFkw51IR gcR1B2CRq/FIv+SoRa1KFnv4d5gWsYov3fG2PcsvUbHiX+bEL+zzYdQ9wJidAcPa XzRrGt1EcEuOiIo0irQdFXbXd9pD69MO5y8+I1WjuDlqWd/MDGEtMNLb662w6iWX /m+f+UnRg6LPbYWaWMSmdswq2LH6JnQ= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:47 2026 by rpki-client